Course details



Start date



Kedleston Road, Derby Campus

Course description

In 2018, General Data Protection Regulation (GDPR) came into effect with new, enforceable regulations for the handling and storing of data to create a safer data environment for citizens. This means organisations will require well-trained Data Protection Officers (DPOs) to oversee their data protection.

Our DPO course is relevant for those looking to understand these new legal requirements, play an active role in data management and the implementation of data protection policies to ensure compliance with the new standards. This training will support postgraduate research students in managing their data as well as for final year students looking to enhance their skills ahead of work placements.

The Training Activities to Deliver the Data Protection Regulation (TAToDPR) is a project to organize specialized and multidisciplinary training activities, tailored to the needs of future Data Protection Officers in Europe. 

How you will learn

The programme is delivered through three modules:

The legal module has a focus on providing knowledge about the legal framework for data protection

  • The legal basis of data protection
  • The role of Data Processors and Controllers
  • Personal data and data subjects
  • Special categories of personal data
  • Exceptions and derogations
  • Data processing
  • Data protection principles
  • Conditions for lawful processing of data
  • Privacy notices and policies
  • Retention and destruction of data
  • Data security
  • Data protection by design and default
  • Accountability and governance
  • Subject access requests
  • Rectification and erasure
  • Breaches, fines and enforcement
  • Applications in professional roles in big and small organisations
  • Case studies and assessments

The Behavioural and Security module is aimed at allowing participants to understand the impact of data in the behaviour of a given organisation and to acquire the ability to manage the security-related aspects involved.

  • Potential data security risks for an organisation related to employee behaviour
  • Organisational culture and security
  • Improving organisational behaviour
  • Authentication of system users
  • Social media security risks
  • Human error
  • Compliance, obedience and human motivation
  • Personality theory and implications for GDPR
  • Characteristics of data breaches
  • Case studies

The Technical, Organisational and Impact Assessment module covers technical aspects of data creation, management and storing, as well as the ability to devise data management strategies and evaluate the impact of policies.

  • Technical aspects of data protection
  • Key principles
  • Internet of things
  • Cloud computing
  • Profiling technologies
  • Privacy by design
  • Block chain technologies
  • Security protocols
  • Data protection impact assessment

Project team

Davide an Italian-qualified lawyer and a manager in the Data Protection Strategy, Legal and Compliance Team at PwC UK. He has experience in a wide range of IT agreements, and complex data privacy programmes across a variety of sectors, both in private and in-house law practices. He has recently led the Global Privacy Office and the GDPR Readiness Programme of a leading dual-listed transnational consumer goods company co-headquartered in London and Rotterdam.

Davide advises both public and private-sector clients on a broad range of data privacy matters, such as:

  • Data privacy risk management framework (eg Data Protection Impact Assessment and Legitimate Interest Assessment)
  • Implementation of privacy management tools (eg OneTrust)
  • Personal data mapping (ie processing activity and asset inventories)
  • Data subject rights handling
  • Cross-border data flows strategy (eg Intra-Group Transfer Agreement and Binding Corporate Rules)
  • Vendor data privacy risk management (ie due diligence and contract negotiation)
  • Training design and delivery
  • Data privacy audits

Davide holds an LLB and LLM and a PhD in Law, the latter with a thesis on the International Trading of Personal Data. He also holds the International Association of Privacy Professional CIPP/E and the OneTrust Privacy Management Associate (OTPM/A) qualifications.

Brian was Head of Employment Law at Denison Till solicitors for 15 years where he also headed up the firm's training department. He is an ILM-accredited (Institute of Leadership and Management) trainer and was an Associate Tutor at the University of York, teaching employment law in their corporate training division. He became a director and head of employment at the York office of Lupton Fawcett solicitors in 2013 and, as well as heading the firm's training department (where he built the biggest set of ILM-accredited lawyers/trainers in the region), he was a member of their management board.

Brian now focuses on employment and GDPR training as well as running his own specialist employment and law firm. He focuses on all areas of employment and data protection, with a particular expertise in data protection and its interface with employment law and practice. 

Arnav is a Senior Associate in PwC UK’s Data Protection, Strategy, Legal and Compliance Services. Prior to joining PwC, Arnav spent six years at top-tier Indian law firms JSA and Trilegal, where he advised large multinational technology companies, including Fortune 500 companies and Unicorns, as well as technology focused private equity funds. He also has research consulting experience in data ethics and privacy through projects for the Open Societies Foundations and Google AI in 2018.

Arnav has extensive experience advising on emerging regulation, data-driven product deployment, data ethics, privacy, technology contracts, compliance, data protection and cross-border mergers and acquisitions and restructuring. He holds a masters specialisation in privacy, artificial intelligence focused data ethics, and digital platforms. Arnav is a Commonwealth (India) qualified lawyer and holds an LLB (Bachelor of Laws) degree, an MSc (Data and Society) from the London School of Economics and Political Science, and is a Certified Information Privacy Professional, Europe (CIPP/E). 

Martin has a background in computer studies and ergonomics. His interests are in the usability and accessibility of interactive system, the use of IT in health, information and intelligence within interactive systems. He has been involved in several EU projects to develop human factors tools, methods and guidelines to promote usability within European IT programmes. Within the Design School at Loughborough University, he teaches HCI, user-centred design and user-experience design. He has knowledge of human factors related to IT systems.

Andrew graduated from York University in 1988 in Psychology and holds postgraduate qualifications from the University of Birmingham, including a masters degree in Ergonomics and a PhD in Mechanical Engineering. He is Professor of Human Factors in Transport Safety and leads the Behavioural Safety Research and Injury Prevention Research Group. He is Director of Internationalisation for the Loughborough Design School and holds a position as a Visiting Professor at Hasselt University in Belgium. He is experienced in human issues related to computer systems.

Nathan is a research assistant in the Loughborough transport safety research group. Nathan has a background in Psychology, having graduated from Nottingham Trent University in 2016 and holds a masters degree in Psychology Research Methods from the University of Nottingham. Nathan has a strong interest in applied research and is particularly interested in human factors relating to data security and transport.

This project has received funding from the European Union's Rights, Equality and Citizenship Programme under Grant Agreement No. 769191.

Logos of Universita Degli Studi Suor Orsola Benincasa (Suor Orsola Benincasa University of Naples), Universidad De Sevilla (University of Seville), Loughborough University, RE:Lab, the University of Derby and the European Union

How to apply

Places are limited to 30 participants so booking is essential. To register for training or for further information, please contact Lesley Masters: